Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
File:                     2wnDhcqGTQSV-VGV_38HvFdh4XY.mft (raw, json)
Hash identifier:          LWEs/i7giJmBeQ7RYwFlydBKK+tNPXSh1C/XF/AbAw8=
Subject key identifier:   04:1A:A5:E8:17:43:B7:42:48:C3:C1:96:FF:3D:92:37:B7:68:7F:F7
Authority key identifier: DB:09:C3:85:CA:86:4D:04:95:F9:51:95:FF:7F:07:BC:57:61:E1:76
Certificate issuer:       /CN=DB09C385CA864D0495F95195FF7F07BC5761E176
Certificate serial:       02CF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2wnDhcqGTQSV-VGV_38HvFdh4XY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
Manifest number:          02CF
Signing time:             Mon 28 Apr 2025 19:39:24 +0000
Manifest this update:     Mon 28 Apr 2025 19:39:24 +0000
Manifest next update:     Tue 29 Apr 2025 01:39:24 +0000
Files and hashes:         1: 2wnDhcqGTQSV-VGV_38HvFdh4XY.crl (hash: 2mtPj1VIPCEGMoL4ZBzs/AeQt9kMwKotwcP7mOjvOo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB09C385CA864D0495F95195FF7F07BC5761E176
        Validity
            Not Before: Apr 28 19:39:24 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=041AA5E81743B74248C3C196FF3D9237B7687FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:76:e4:6b:ce:10:9a:1b:62:cc:f1:71:7e:
                    61:36:c7:6b:20:47:da:a5:25:c4:bc:d0:40:10:60:
                    35:fd:34:4c:6b:c5:32:bf:8b:d8:d4:36:a3:2a:63:
                    51:5a:a4:3f:a8:d8:71:40:65:03:dc:8d:bc:4f:7f:
                    4a:aa:8c:80:55:83:73:ef:9a:4e:92:94:1d:b4:bd:
                    eb:37:17:2c:32:a1:35:26:32:fc:aa:00:cf:9d:d3:
                    49:74:19:ca:0d:92:0d:29:b5:f8:ad:88:67:db:3a:
                    92:17:68:83:a9:dc:51:09:5f:f6:5d:7c:b1:34:37:
                    f4:73:d9:01:14:88:09:e0:94:f4:59:f2:8a:01:98:
                    36:20:d7:59:9c:65:e5:4a:20:b6:e8:47:fb:ea:c6:
                    cc:13:56:a1:a0:63:d5:d4:13:e8:6e:86:04:cb:4e:
                    f2:0a:5d:27:82:4c:16:86:7d:b4:87:b3:aa:49:48:
                    df:a0:d3:20:29:9f:08:fc:64:79:84:22:16:50:d0:
                    63:ea:89:4d:d1:08:87:13:04:7a:17:4e:97:fc:e7:
                    5d:14:6d:af:83:03:16:b3:7e:23:58:a9:7e:b5:12:
                    ae:4b:b3:74:84:fd:7b:6a:c0:f4:49:7c:e3:d6:66:
                    54:b9:d7:dd:44:50:85:04:8e:78:5a:ed:2c:04:96:
                    0a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:A5:E8:17:43:B7:42:48:C3:C1:96:FF:3D:92:37:B7:68:7F:F7
            X509v3 Authority Key Identifier:
                keyid:DB:09:C3:85:CA:86:4D:04:95:F9:51:95:FF:7F:07:BC:57:61:E1:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2wnDhcqGTQSV-VGV_38HvFdh4XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:cd:7d:2a:fd:54:58:ef:bc:d6:77:14:2f:1b:2f:1b:d0:
         40:59:21:7d:50:f5:b4:f7:1c:78:e5:fb:a9:6e:ea:ba:bf:03:
         c7:52:d1:48:15:56:6c:1e:a8:5e:c4:89:87:5d:2f:95:1a:58:
         1e:35:25:6a:93:62:ae:b0:17:83:eb:e5:cf:7d:79:4d:0b:0a:
         76:98:a1:6b:46:da:a0:b6:5d:58:76:5c:70:4d:a9:ce:42:ca:
         ac:d2:1b:b2:e6:49:3b:69:2a:14:34:47:6c:f2:6b:15:ff:37:
         16:2b:b4:00:7a:64:ae:c4:5a:b2:c7:aa:ce:7e:8b:f2:6f:4f:
         89:1c:a0:a9:42:dc:65:3a:27:6d:89:21:b5:f3:14:a1:5d:f3:
         d3:82:24:3c:52:7a:aa:79:54:73:75:62:93:93:0b:17:76:38:
         af:41:4a:85:ff:71:81:16:21:07:d6:97:de:ce:ab:68:3d:b0:
         bc:0d:54:3b:3a:39:e5:1a:1a:cc:b3:3d:2a:56:62:4e:0c:41:
         28:66:da:90:3f:62:1f:e6:81:1b:53:33:ef:24:35:12:26:9f:
         8c:0b:1e:23:74:38:f7:03:ed:62:2c:69:d8:68:7b:3a:d4:6b:
         88:c0:00:59:c4:ae:37:98:4f:48:7b:c9:d9:e0:f6:73:9c:f5:
         3c:65:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----